Snort mailing list archives

spp_unidecode false positive


From: "Ben Keepper" <bkeepper () Paladinss com>
Date: Mon, 18 Feb 2002 11:29:39 -0800

I am getting a lot of 

spp_unidecode: CGI Null Byte attack detected

and

spp_unidecode: Unicode Directory Transversal attack detected

coming from my firewall NAT IP address going to particular web sites
(Compaq and Ingrammicro).

Any way to eliminate this false positive.

Thanks,

Ben

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: